script-src 'self' https://platform.twitter.com;